[Lunar-commits] <moonbase> Subject: expat: fix DoS bug

[Duncan Gibson]

commit 62c8d5bf7d244f26ea975419a8f9906d82a877f3
Author: Paul Bredbury <brebs at sent.com>
Date:   Thu Aug 27 23:30:14 2009 +0200

    Subject: expat: fix DoS bug
    
    Is in Gentoo:
    http://sources.gentoo.org/viewcvs.py/gentoo-x86/dev-libs/expat/
---
 libs/expat/BUILD   |    8 ++++++--
 libs/expat/DETAILS |    5 ++++-
 2 files changed, 10 insertions(+), 3 deletions(-)

diff --git a/libs/expat/BUILD b/libs/expat/BUILD
index 85f8e5f..dbbfbf2 100644
--- a/libs/expat/BUILD
+++ b/libs/expat/BUILD
@@ -1,9 +1,13 @@
 (
 
+  # Fix DoS bug - http://expat.cvs.sourceforge.net/viewvc/expat/expat/lib/xmltok_impl.c?r1=1.15&view=log
+  patch_it $SOURCE2 0 &&
+
   sedit "s/\/man\/man1/\/share\/man\/man1/g" Makefile.in &&
-  default_build
 
-  # Lets be naughty and do the coverup
+  default_build &&
+
+  # Let's be naughty and do the coverup
   ln -sf /usr/lib/libexpat.so /usr/lib/libexpat.so.0 
 
 ) > $C_FIFO 2>&1
diff --git a/libs/expat/DETAILS b/libs/expat/DETAILS
index 285ee0c..0013687 100644
--- a/libs/expat/DETAILS
+++ b/libs/expat/DETAILS
@@ -1,11 +1,14 @@
           MODULE=expat
          VERSION=2.0.1
           SOURCE=$MODULE-$VERSION.tar.gz
+         SOURCE2=expat-2.0.1-fix_bug_1990430.patch.bz2
       SOURCE_URL=$SFORGE_URL/$MODULE/
+     SOURCE2_URL=$PATCH_URL
       SOURCE_VFY=sha1:663548c37b996082db1f2f2c32af060d7aa15c2d
+     SOURCE2_VFY=sha1:e49205a3742051e2ce88f87a84750d080874aec6
         WEB_SITE=http://expat.sourceforge.net
          ENTERED=20010928
-         UPDATED=20070606
+         UPDATED=20090818
            SHORT="XML parsing library"
 
 cat << EOF